Essentially, you can determine some types of traffic even if it is encrypted (but not content). That's how some school admins keep https proxies from working correctly. It isn't close to 100% but it is just one more thing.
For example: http://www.ipoque.com/en/products/pr...ication-engine